Safety Critical Systems Development

Chris Johnson, Index

Multilevel Triple Modular Redundancy (TMR) background image

background image

No protection if 2 fail per level.
No protection from common failure
- eg if hard/software is duplicated.